This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer File: wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer (raw, json) Hash identifier: KAo4y2iIU0ig9u+a5Xn9/m9Kx03jfK/VALwxEiIDPqE= Subject key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC77AAD5A23DD4B7886FFF5E28A5160 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199902 IP: 143.237.0.0/16 IP: 2001:67c:268c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7a:ad:5a:23:dd:4b:78:86:ff:f5:e2:8a:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c29c1007746981fcc408839965b1671c037d121b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:4d:a2:58:13:08:2d:44:2f:1d:e1:e1:d5: 58:ca:27:1b:79:d7:10:2f:70:3b:de:18:17:71:70: 8f:7f:4f:d0:7c:13:ac:da:80:32:0d:08:6b:7f:da: 71:c7:0a:af:c9:c7:af:2d:4c:f6:fb:7a:81:d7:f4: ec:68:a1:8e:05:5c:88:95:21:98:d6:6d:86:94:c8: 70:fd:2a:f9:2d:4f:d6:d3:f8:ab:7f:e9:fa:ac:7e: 8d:a6:52:0b:3e:60:00:bd:3e:b9:2c:dd:43:f9:89: 91:fd:a0:b4:c4:23:67:12:23:49:be:91:fd:3a:46: 46:7f:f3:57:5c:e8:e1:86:5f:cf:48:30:45:11:6b: ed:92:a4:8c:e8:5e:62:9f:ea:14:5c:68:08:9e:6f: f0:20:b7:16:98:a0:13:19:48:e4:8c:0f:6a:a7:e1: 7e:82:9b:70:d0:75:f7:0e:1d:0b:12:49:59:0e:be: a9:2b:93:43:be:61:3d:86:95:da:42:07:b7:9f:57: 01:1a:ff:71:f8:99:ab:2c:ce:56:e5:c1:11:c2:5e: 05:b4:87:f6:89:2d:31:9c:34:1f:72:9f:46:5d:cf: 2e:dd:98:0d:dd:10:f0:50:81:7c:f1:37:3a:2c:8a: a9:b2:30:85:e9:0f:29:1e:d8:a0:7e:89:70:e0:9a: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.237.0.0/16 IPv6: 2001:67c:268c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199902 Signature Algorithm: sha256WithRSAEncryption 67:ee:36:21:d4:ef:93:d5:ef:71:90:cd:a8:c2:90:e4:fc:88: d5:2f:8b:bb:50:53:30:68:76:9a:bb:48:e8:7e:6e:b1:38:66: c0:75:5a:1b:0e:ea:e7:01:aa:cd:99:85:b1:12:e0:39:22:70: eb:7d:c3:7c:33:a4:d3:61:d2:7a:a3:16:bc:a4:63:51:18:82: 83:b0:16:52:54:2e:75:9a:ed:b5:a1:81:92:e0:98:bd:30:de: ef:3e:bc:c3:44:ea:3c:57:c0:c1:4a:3c:94:18:08:c8:b5:06: af:61:37:84:90:30:38:4e:e7:3e:c3:41:67:b4:2b:b0:6b:b0: 69:08:ea:03:cd:01:50:fc:fb:3f:e1:b5:b5:7a:ab:ea:5e:f2: 4d:cf:10:8b:53:e4:5a:3d:3f:f9:45:6d:66:d6:3a:0d:08:96: 45:56:26:60:38:15:51:50:42:68:41:60:ad:b9:61:52:3e:cc: 9b:05:82:3c:84:77:ca:b2:23:e3:4f:c4:24:5f:d7:b3:63:3d: 47:d2:7c:98:bc:c5:b8:72:d9:bf:c7:44:35:8d:21:fc:c7:c3: 1e:1d:95:95:9f:ff:96:7d:3f:31:c9:96:46:ff:9f:e8:4a:fd: f3:b4:6f:a2:46:88:5b:35:6d:08:71:7b:86:20:e7:1d:2b:1a: be:62:63:b6 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt6x3qtWiPdS3iG//XiilFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjljMTAwNzc0Njk4MWZjYzQwODgzOTk2NWIxNjcxYzAzN2QxMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm5NolgTCC1ELx3h4dVYyicbedcQ L3A73hgXcXCPf0/QfBOs2oAyDQhrf9pxxwqvycevLUz2+3qB1/TsaKGOBVyIlSGY 1m2GlMhw/Sr5LU/W0/irf+n6rH6NplILPmAAvT65LN1D+YmR/aC0xCNnEiNJvpH9 OkZGf/NXXOjhhl/PSDBFEWvtkqSM6F5in+oUXGgInm/wILcWmKATGUjkjA9qp+F+ gptw0HX3Dh0LEklZDr6pK5NDvmE9hpXaQge3n1cBGv9x+JmrLM5W5cERwl4FtIf2 iS0xnDQfcp9GXc8u3ZgN3RDwUIF88Tc6LIqpsjCF6Q8pHtigfolw4JpuGQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFMKcEAd0aYH8xAiDmWWxZxwDfRIbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzhhYjI2 Yy1iYTE3LTQyODgtODc0OS04ZmM5MzBkODcwMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvOGFiMjZj LWJhMTctNDI4OC04NzQ5LThmYzkzMGQ4NzAyYS8xL3dwd1FCM1JwZ2Z6RUNJT1pa YkZuSEFOOUVocy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC8GCCsGAQUF BwEHAQH/BCAwHjALBAIAATAFAwMAj+0wDwQCAAIwCQMHACABBnwmjDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDDN4wDQYJKoZIhvcNAQELBQADggEBAGfuNiHU75PV 73GQzajCkOT8iNUvi7tQUzBodpq7SOh+brE4ZsB1WhsO6ucBqs2ZhbES4DkicOt9 w3wzpNNh0nqjFrykY1EYgoOwFlJULnWa7bWhgZLgmL0w3u8+vMNE6jxXwMFKPJQY CMi1Bq9hN4SQMDhO5z7DQWe0K7BrsGkI6gPNAVD8+z/htbV6q+pe8k3PEItT5Fo9 P/lFbWbWOg0IlkVWJmA4FVFQQmhBYK25YVI+zJsFgjyEd8qyI+NPxCRf17NjPUfS fJi8xbhy2b/HRDWNIfzHwx4dlZWf/5Z9PzHJlkb/n+hK/fO0b6JGiFs1bQhxe4Yg 5x0rGr5iY7Y= -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:00 2026 by rpki-client